Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.cer
File: cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.cer (raw, json)
Hash identifier: k03lbSsOHNDAzu9uiy/KZEPEUjmilzdGtt8nX80GlWc=
Subject key identifier: 70:F4:09:EE:8F:17:27:C6:D9:4E:F7:94:32:4C:AF:4C:5F:D9:41:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CE2EAD6B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:56:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.139.60.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673821939379 (0x9ce2ead6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70f409ee8f1727c6d94ef794324caf4c5fd941a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:03:a5:e8:78:78:1d:dc:11:1e:e1:59:36:
c1:68:d7:e7:c5:77:2e:80:b7:b4:0f:9a:24:c5:85:
3a:4f:b4:8f:d1:a5:b3:9d:fc:0a:a3:3d:e2:50:27:
81:11:f0:dd:d4:56:84:2e:ed:41:66:11:c0:fa:00:
83:56:82:e5:35:23:92:93:21:7f:96:44:bc:d5:90:
b1:f8:c3:c2:81:fa:50:c3:2d:c7:37:2c:16:11:71:
e7:49:c1:f3:4a:88:51:ab:82:ba:cb:d5:80:13:e6:
af:e7:0d:31:5e:3b:13:ba:bc:6a:45:74:d5:d7:95:
2d:ca:f1:58:ee:47:5c:4e:12:30:1e:f1:4a:bd:be:
fa:60:23:ed:ef:04:32:fa:a7:58:e4:c1:8a:16:00:
00:f1:34:35:92:49:ac:67:9a:c1:af:ae:32:92:50:
9e:14:e5:79:70:13:2c:f0:f3:ab:c6:a5:85:74:4e:
54:41:c5:b8:9c:a6:04:b5:02:55:69:16:d0:67:38:
c4:5e:7a:f1:03:be:01:c8:80:e6:e4:9c:11:2e:f2:
c0:08:fe:f0:b9:2e:2d:c5:f3:b3:a5:10:ad:ab:ba:
9d:10:64:57:f6:72:45:96:79:93:aa:18:7e:93:6c:
6f:b8:b9:64:04:d4:d5:21:c4:66:c9:29:cc:8e:8b:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F4:09:EE:8F:17:27:C6:D9:4E:F7:94:32:4C:AF:4C:5F:D9:41:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:65:05:5d:f2:d6:d5:b3:6e:71:f1:5a:fa:bf:77:7f:e6:bd:
16:36:68:01:f3:72:11:0e:21:63:ae:96:58:fa:7a:3f:af:25:
ac:2e:7c:38:6d:4c:b4:6e:9b:77:f3:11:2d:64:19:dd:0c:4d:
50:8a:85:74:67:ab:78:86:24:69:ba:6a:a7:e5:c3:38:32:4a:
6c:e5:04:0c:ea:fa:21:3d:ea:5e:89:7f:91:ab:ee:c5:85:f5:
a9:01:7a:9f:cd:0b:dc:ff:ec:5f:f1:79:20:e6:6d:c6:c1:01:
15:99:39:c9:09:c3:9a:80:5c:a6:76:8b:d1:e1:1c:e7:d6:a4:
20:08:05:32:df:80:34:0f:d3:4a:b4:57:52:6a:48:5d:67:cd:
57:74:02:7b:c4:59:bc:5e:67:46:e0:e5:7d:0a:c0:bb:ae:29:
9f:e4:ac:6e:0e:ea:78:79:fc:2c:1f:09:51:c5:b1:6b:d4:78:
cb:ab:14:ee:d9:06:bd:1e:a8:a3:46:ef:eb:ca:a1:fc:e1:bc:
78:58:5f:0e:fc:51:23:33:ac:bf:ee:8d:3b:99:8e:b6:77:1c:
51:93:71:5d:d7:b8:eb:82:4c:3d:85:29:ae:e2:63:3a:45:61:
0b:ec:6a:3e:a1:c4:4c:76:ff:fd:e7:fe:f5:bd:c0:b6:73:bc:
bd:d7:84:fe
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJzi6tazMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDM1NjA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3MGY0MDllZThm
MTcyN2M2ZDk0ZWY3OTQzMjRjYWY0YzVmZDk0MWE1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwFEDpeh4eB3cER7hWTbBaNfnxXcugLe0D5okxYU6T7SP
0aWznfwKoz3iUCeBEfDd1FaELu1BZhHA+gCDVoLlNSOSkyF/lkS81ZCx+MPCgfpQ
wy3HNywWEXHnScHzSohRq4K6y9WAE+av5w0xXjsTurxqRXTV15UtyvFY7kdcThIw
HvFKvb76YCPt7wQy+qdY5MGKFgAA8TQ1kkmsZ5rBr64yklCeFOV5cBMs8POrxqWF
dE5UQcW4nKYEtQJVaRbQZzjEXnrxA74ByIDm5JwRLvLACP7wuS4txfOzpRCtq7qd
EGRX9nJFlnmTqhh+k2xvuLlkBNTVIcRmySnMjoue8QIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFHD0Ce6PFyfG2U73lDJMr0xf2UGlMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2NiMWMyNS1iNTU2LTQ1YTQt
YjdjMS0xNWY3YmQ2MGIwMjgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvY2IxYzI1LWI1NTYtNDVhNC1i
N2MxLTE1ZjdiZDYwYjAyOC8xL2NQUUo3bzhYSjhiWlR2ZVVNa3l2VEZfWlFhVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCuYs8MA0GCSqGSIb3DQEBCwUAA4IBAQAbZQVd8tbVs25x8Vr6v3d/
5r0WNmgB83IRDiFjrpZY+no/ryWsLnw4bUy0bpt38xEtZBndDE1QioV0Z6t4hiRp
umqn5cM4Mkps5QQM6vohPepeiX+Rq+7FhfWpAXqfzQvc/+xf8Xkg5m3GwQEVmTnJ
CcOagFymdovR4Rzn1qQgCAUy34A0D9NKtFdSakhdZ81XdAJ7xFm8XmdG4OV9CsC7
rimf5KxuDup4efwsHwlRxbFr1HjLqxTu2Qa9HqijRu/ryqH84bx4WF8O/FEjM6y/
7o07mY62dxxRk3Fd17jrgkw9hSmu4mM6RWEL7Go+ocRMdv/95/71vcC2c7y914T+
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:38 2025 by rpki-client